[An] AIS-provided restriction to prevent a program from accessing data in another user's segment of storage. [NIS] 2. [An] information-system (IS) hardware-provided restriction to prevent a program from accessing data in another user's segment of storage. [INFOSEC-99]